cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

453
Views
15
Helpful
7
Replies
Highlighted
Beginner

Best practices and limitations on ISE Guest Access Bandwidth Management ?

I will be having a discussion with a client on ISE Guest Access Bandwidth Management, particularly limiting client bandwidth per user. I have no experience on this.

 

Hence, I'd appreciate if you could please advise on

  • Requirements. For e.g ISE version, WLC version and so on
  • Any limitations or drawbacks using ISE
  • Best practices etc

 

Thanks in advance!

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Re: Best practices and limitations on ISE Guest Access Bandwidth Management ?

Hi,

 

To limit guest bandwidth while having ISE and WLC in your environment, you can configure ISE to pass QOS attributes to WLC. Following are the attributes that need to define in authorization profile in ISE which will pass to the WLC


Current ISE Suggested version = 2.6.0

depend on the numbe rof users, you will choose required WLC

For WLC 5520, suggested software Release  = 8.5.151.0 ED
 

Advance Attributes for Authorization Profile which you can create and assign to authorization policy mapped to Guest SSID:


Aire-Real-Time-Bandwidth-Average-UpStream-Contract = x
Aire-Data-Bandwidth-Average-DownStream-Contract = x
Aire-Data-Bandwidth-Burst-UpStream-Contract = x
Aire-Real-Time-Bandwidth-Burst-DownStream-Contract = x
Aire-Real-Time-Bandwidth-Average-DownStream-Contract = x
Aire-Real-Time-Bandwidth-Burst-UpStream-Contract = x
Aire-Data-Bandwidth-Average-UpStream-Contract = x
Aire-Data-Bandwidth-Burst-DownStream-Contract = x

 

 

View solution in original post

7 REPLIES 7
Highlighted

Re: Best practices and limitations on ISE Guest Access Bandwidth Management ?

Hi,

 

To limit guest bandwidth while having ISE and WLC in your environment, you can configure ISE to pass QOS attributes to WLC. Following are the attributes that need to define in authorization profile in ISE which will pass to the WLC


Current ISE Suggested version = 2.6.0

depend on the numbe rof users, you will choose required WLC

For WLC 5520, suggested software Release  = 8.5.151.0 ED
 

Advance Attributes for Authorization Profile which you can create and assign to authorization policy mapped to Guest SSID:


Aire-Real-Time-Bandwidth-Average-UpStream-Contract = x
Aire-Data-Bandwidth-Average-DownStream-Contract = x
Aire-Data-Bandwidth-Burst-UpStream-Contract = x
Aire-Real-Time-Bandwidth-Burst-DownStream-Contract = x
Aire-Real-Time-Bandwidth-Average-DownStream-Contract = x
Aire-Real-Time-Bandwidth-Burst-UpStream-Contract = x
Aire-Data-Bandwidth-Average-UpStream-Contract = x
Aire-Data-Bandwidth-Burst-DownStream-Contract = x

 

 

View solution in original post

Highlighted
Beginner

Re: Best practices and limitations on ISE Guest Access Bandwidth Management ?

Hi Muhammad,

Thanks for your prompt reply.

Regarding the value "x", what unit symbol is this required ?
For e.g, MB, Bytes etc

Also are there any limitations of using ISE for this ?
Highlighted

Re: Best practices and limitations on ISE Guest Access Bandwidth Management ?

It is in Kbps.

 

Regarding limitations, can you update which WLC platform you will use for this deployment ? we can then further re-confirm that all these parameters will be supported on that WLC .

 

Highlighted
Beginner

Re: Best practices and limitations on ISE Guest Access Bandwidth Management ?

No worries. Thanks!
Highlighted
Beginner

Re: Best practices and limitations on ISE Guest Access Bandwidth Management ?

Does WLC requires any separate configuration as well in relation to this ?
Highlighted

Re: Best practices and limitations on ISE Guest Access Bandwidth Management ?

you have to add ISE as radius server in AAA settings once you are configuring security settings for SSID and authentication and authorization atleast. I believe it will be enough to allow WLC to accept parameters received from ISE

Highlighted
Beginner

Re: Best practices and limitations on ISE Guest Access Bandwidth Management ?

Hi Muhammad, could you please advise how this policy would exactly look like in a ISE wireless guest access AuthP or AuthZ policy ?

Replying to your previous qn, the WLC model is AIR-CT3504 and version 8.10.112.0.